Operational Security Analyst (IT & Payment Systems)

Indra is one of the leading global technology and consulting companies and the technological partner for core business operations of its customers worldwide. It is a world-leader in providing proprietary solutions in specific segments in Transport and Defence markets, and the leading firm in Digital Transformation Consultancy and Information Technologies in Spain and Latin America through its affiliate Minsait. Its business model is based on a comprehensive range of proprietary products, with a high-value focus and with a high innovation component. In the 2024 financial year, Indra achieved revenue of € 4.84 billion, 60,000+ employees, a local presence in 46 countries and business operations in over 140 countries.

As the technological partner for its customers’ key operations, Indra is at the core of their business, and Indra’s four values guide everything we do:

Innovation - Our capacity for innovation, cutting-edge solutions, and specialised team of professionals enable us to drive a safer, more connected future through technology.

Trust - We work with strength, commitment, and reliability, delivering quality solutions to build trust with customers, employees, partners, investors, and society.

Connection - We harness the power of collaboration, connect ideas and solutions, and adapt to our customers’ needs, supporting them on the path to a better future.

Foresight - We anticipate future needs to make the world safer and more connected, transforming our experience and knowledge into solutions for a better tomorrow.

Role Overview

We are seeking an Operational Security Analyst to support the day-to-day delivery of information security across our IT, cloud, and payment environments.

This role sits within the operations function and is focused on embedding security into live services, ensuring controls are effective, risks are understood, and security practices are consistently applied across engineering and operational teams.

The successful candidate will work closely with service delivery, infrastructure, and third-party providers to support a secure, compliant, and resilient operating environment, particularly within regulated payment (PCI DSS / P2PE) contexts.

Key Responsibilities

• Operational Security & Service Support
• Act as a point of contact for operational security matters, supporting service delivery across cloud, infrastructure, and payment environments.
• Support the implementation and ongoing operation of security controls across AWS, on-prem infrastructure, and end-user environments.
• Work closely with engineering and operations teams to ensure security is embedded into day-to-day activities.

Security Operations & Monitoring

• Support SIEM monitoring and alert triage, identifying and responding to potential security events.
• Assist in security event investigation and escalation, ensuring appropriate response and documentation.
• Contribute to improving monitoring coverage and detection capability.

Risk & Vulnerability Management

• Assist in identifying, assessing, and tracking information security risks in collaboration with risk owners.
• Support vulnerability management processes, including:
• Scanning and identification
• Prioritisation and remediation tracking
• Reporting and follow-up

Payment Security (PCI / P2PE)

• Support operational security controls within Cardholder Data Environments (CDE).
• Assist in maintaining PCI DSS compliance, including:
• Logging and monitoring
• Access control reviews
• Vulnerability management activities
• Gain exposure to P2PE environments and device ecosystems, supporting secure operations.

Security Controls & Cryptography

• Assist in the operation of cryptographic controls, with awareness of:
• Key management practices
• Secure handling and storage
• Support access control and identity management processes.

Documentation, Standards & Continuous Improvement

• Contribute to the development and maintenance of: Security procedures and Standards and runbooks
• Promote security awareness across teams, ensuring policies are understood and followed.
• Support automation and continuous improvement initiatives within security operations.

Third-Party & Compliance Support

• Assist with third-party security reviews and control validation activities.
• Support audit and compliance processes, including evidence gathering for: PCI DSS and ISO 27001
• Contribute to maintaining a strong control and governance environment.